General

  • Target

    5461b932108bbf636aec0a1df98f1750_NeikiAnalytics.exe

  • Size

    66KB

  • Sample

    240519-cxf3fsdg4w

  • MD5

    5461b932108bbf636aec0a1df98f1750

  • SHA1

    29a7cad50fc731b4b21e8640f35ffe94bfe21ed5

  • SHA256

    9c24e0e54b8d1ef996abc0ec41811f6502b1be4a2b2b9ed7dd23eadd898dc961

  • SHA512

    30b776aa44207df2fe564740fcca944a0a684a907b7c239ee5d97be6646916059ae0e02f6b38742d8a7f512af4cfed1741d8a3ba21a9cc39743ad5396dcdaab2

  • SSDEEP

    1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFdJUDbAIe:ymb3NkkiQ3mdBjFIFdJ8bW

Malware Config

Targets

    • Target

      5461b932108bbf636aec0a1df98f1750_NeikiAnalytics.exe

    • Size

      66KB

    • MD5

      5461b932108bbf636aec0a1df98f1750

    • SHA1

      29a7cad50fc731b4b21e8640f35ffe94bfe21ed5

    • SHA256

      9c24e0e54b8d1ef996abc0ec41811f6502b1be4a2b2b9ed7dd23eadd898dc961

    • SHA512

      30b776aa44207df2fe564740fcca944a0a684a907b7c239ee5d97be6646916059ae0e02f6b38742d8a7f512af4cfed1741d8a3ba21a9cc39743ad5396dcdaab2

    • SSDEEP

      1536:9Q8hoOAesfYvcyjfS3H9yl8Q1pmdBcxedLxNDIFdJUDbAIe:ymb3NkkiQ3mdBjFIFdJ8bW

    • Blackmoon, KrBanker

      Blackmoon also known as KrBanker is banking trojan first discovered in early 2014.

    • Detect Blackmoon payload

    • Executes dropped EXE

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Matrix

Tasks